Published: August 6, 2023
Author(s)
Shanée Dawkins (NIST), Jody Jacobs (NIST)
Conference
Name: USENIX Symposium on Usable Privacy and Security (SOUPS) 2023
Dates: 08/06/2023 - 08/08/2023
Location: Anaheim, CA, USA
Citation: Proceedings of the Nineteenth Symposium on Usable Privacy and Security, pp. 4
Organizations around the world are using the NIST Phish Scale (NPS) in their phishing awareness training programs. As a new metric for measuring human phishing detection difficulty of phishing emails, the use of the NPS by phishing training implementers across different types of organizations has not been formally evaluated. This poster presents the results of a study on the use of the NPS by organizations with established phishing awareness training programs. Initial results suggest that there are areas for improvement, but training implementers perceive the NPS as useful overall and an asset to their organizations’ cybersecurity awareness programs.
Organizations around the world are using the NIST Phish Scale (NPS) in their phishing awareness training programs. As a new metric for measuring human phishing detection difficulty of phishing emails, the use of the NPS by phishing training implementers across different types of organizations has...
See full abstract
Organizations around the world are using the NIST Phish Scale (NPS) in their phishing awareness training programs. As a new metric for measuring human phishing detection difficulty of phishing emails, the use of the NPS by phishing training implementers across different types of organizations has not been formally evaluated. This poster presents the results of a study on the use of the NPS by organizations with established phishing awareness training programs. Initial results suggest that there are areas for improvement, but training implementers perceive the NPS as useful overall and an asset to their organizations’ cybersecurity awareness programs.
Hide full abstract
Keywords
NIST Phish Scale; phishing; usable cybersecurity; cybersecurity awareness training
Control Families
None selected